Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: tadro1KXDrpoj5YvQFolEUtE0K1wLQYBooIvs7I9f/E=
Subject key identifier: 86:A7:A3:6E:D7:79:3B:E1:7B:4F:3F:F8:8B:F7:83:6C:06:CF:0F:F6
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 019E1EA3CA12A9FE2F1F250DD31BAF64BBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 0288
Signing time: Wed 13 May 2026 00:01:51 +0000
Manifest this update: Wed 13 May 2026 00:01:51 +0000
Manifest next update: Thu 14 May 2026 00:01:51 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: xKz/bV0CUB94hJoWqt/RELltwqS9WD+kqUmM0RKQsRM=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:ca:12:a9:fe:2f:1f:25:0d:d3:1b:af:64:bb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: May 13 00:01:51 2026 GMT
Not After : May 14 00:01:51 2026 GMT
Subject: CN=86a7a36ed7793be17b4f3ff88bf7836c06cf0ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:ca:55:a0:a2:b2:67:f1:29:6a:a4:d3:b6:
d6:af:33:f1:e7:fd:b1:3f:48:ad:ab:74:7e:b0:42:
34:e9:24:cd:86:83:c8:9c:5f:92:d7:b5:0b:68:8d:
2a:38:99:fa:4d:e5:e6:f7:4c:e4:04:e6:28:64:a1:
11:28:c1:a9:86:09:8a:94:62:a2:c2:e2:bd:7e:98:
a7:a5:3e:68:dd:9e:c5:e2:22:38:e4:8e:90:ef:13:
9b:cf:d9:a0:97:9b:40:bc:88:a7:db:bf:e8:28:2c:
55:55:f0:86:d2:eb:c0:07:97:f7:fd:54:a2:ed:44:
29:61:8d:bc:31:da:1f:b4:ee:a1:08:82:72:ca:a7:
a0:23:64:aa:e5:74:1c:c4:7b:b4:26:ed:d5:b5:89:
1a:ee:1c:12:87:93:fb:d6:13:8e:f6:f3:cf:38:59:
3c:4d:de:c7:16:8a:60:0b:49:92:ab:3f:57:78:be:
6a:59:d7:b6:a0:43:22:ff:75:32:03:3e:22:e7:ab:
c8:33:7c:e8:eb:f4:5f:11:3c:23:ec:75:b9:b4:59:
2f:a5:8f:eb:ac:81:21:15:48:cb:a7:ee:54:27:31:
54:8f:e8:f5:aa:07:04:54:54:84:53:05:ec:34:f7:
80:70:71:c0:f0:3d:4b:8b:46:ec:46:c8:8e:2f:ef:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:A3:6E:D7:79:3B:E1:7B:4F:3F:F8:8B:F7:83:6C:06:CF:0F:F6
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6d:bb:47:e7:b1:11:9a:f1:aa:28:aa:15:95:01:8d:ba:12:
75:db:c0:17:f6:03:22:9d:74:27:00:52:94:5b:b0:d1:c1:49:
62:ba:17:a1:d4:65:44:b9:11:62:15:bb:6d:af:7b:0d:4b:cf:
d0:84:6b:15:18:36:78:95:dc:8f:88:c2:2d:b7:94:6e:3c:12:
83:87:cf:74:e1:2a:13:6d:62:45:a4:fc:c0:f6:51:6d:9f:a4:
3e:15:9d:40:ce:63:e4:e0:88:f6:f5:de:f3:f4:91:5e:d7:aa:
bc:f4:6f:f7:8e:b5:a6:13:e3:bb:d2:58:3c:79:9d:38:73:39:
cb:2f:69:29:3f:e6:c1:c1:47:8f:4f:de:5c:59:01:80:09:bf:
48:db:dc:d7:8b:06:9d:59:51:09:50:79:ca:59:a7:17:c2:73:
af:85:75:de:92:cc:e0:f4:07:5b:71:24:a4:83:09:28:5c:0c:
af:34:4d:63:11:72:f2:5f:a2:bc:aa:15:ff:6e:c7:e6:51:ce:
97:ab:1a:4f:4a:10:fe:07:63:c3:d7:99:2b:07:e8:d0:d8:c8:
fa:5d:1a:74:09:0f:70:43:f9:02:82:a1:fe:5d:34:a8:10:f1:
29:f8:9b:ef:df:0e:4a:5c:df:36:f3:40:21:85:ba:6a:86:55:
8b:08:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:52 2026 by rpki-client